M2Team/Privexec

AppExec GUI Example

WildByDesign opened this issue · 5 comments

I spent some time doing some simple GUI restructuring within the AppExec.rc file locally on my machine and have compiled and using the example currently.

  • more horizontal space for Folder and Registry ACLs which often can be long
  • more vertical space for App Capabilities List for easier navigation and selection
  • removed Alias from Command box because Alias' are not very relevant to AppContainer *

(*) You will likely need to make some changes to the Alias code in AppExec because I removed it from AppExec.rc file in a more "hacky" type of way.

appexec ui example

Anyway, please let me know what you think. I am always happy to share any changes that I have made. I can send you the code snippet from AppExec.rc file or send you compiled AppExec.exe to play around with so that you can test and see if you like the changes.

Enable Less Privileged AppContainer Maybe move up, abbreviated as Enable LPAC

That is a great idea. I will shorten the AppContainer Name text box slightly just enough to fit the abbreviated "Enable LPAC" right beside it. I will do this and show another screenshot in the next few hours.

This will actually be perfect because it will free up enough space for my next question. Do you think that it would be possible to add the AppX Manifest file import/parsing of Capabilities to AppExec program similar to Privexec?

I know that you made changes to allow unique SID creation so I assume that might make it more difficult to add AppX Manifest file import/parsing to AppExec. If possible, the AppX import is incredibly powerful and excellent for testing. Particularly, a user can have multiple AppX files, one for different testing programs once you know which Capabilities are required.

Thank you for your amazing work and dedication to programming in general. I am thankful and I appreciate your dedication to all of open source software. Great stuff!

Here is step 2 after moving the Enable LPAC checkbox up as suggested.

Please let me know if the position of Enable LPAC checkbox is good. If yes, then I will proceed and move the other boxes up to align correctly. Thank you.

appexec ui update

You can see the latest build, I kept the original layout, but added the button to the AppManifest in the AppContainer edit box, but the parsing of the import file is not implemented.

Here is my latest example based on your latest code base. I think that your latest build on AppVeyor looks great and therefore I feel like we can close this thread. If you do want any of my code changes, please let me know and I am happy to share.

appexec ui example 3